Privacy Policy

Amously Inc. ("the Company") complies with the Personal Information Protection Act of Korea (PIPA) and other applicable laws, and has established this Privacy Policy to protect users' personal information.

This policy applies to the website operated by the Company at www.amously.ai.

---

1. Personal Information We Collect and How

When you use the contact form

• Items collected: name, work email address, company name
• Method: the contact form on this website
• Legal basis: Article 15(1)(4) of PIPA — processing necessary to take steps, at your request, to respond to your enquiry.

When you apply for a job

• Items collected: the items you enter in the application form (such as name, phone number, email, work history and education, and an attached CV)
• Method: the application form (Google Forms) linked from our careers page, or email
• Legal basis: Article 15(1)(4) of PIPA — processing necessary to carry out, at your request, the recruitment process and to consider entering into an employment contract.
• We do not ask for unique identifiers such as resident registration numbers, or for sensitive information such as health or religion. Please do not include such information in your application or attachments.

Information generated automatically while you use the site

• IP address: used only to rate-limit repeated submissions of the contact form. The contact handler holds it in server memory without writing it to a separate database or file. Hosting access logs are handled separately.
• Transmission while the site is displayed: simply opening a page sends your IP address to our hosting provider and to the web font providers. Who they are and why is set out in Section 5.
• Country of access: the country our hosting provider determines from your IP address is used only to decide how cookie consent is handled (Section 9). We do not store the country itself; a strictly necessary cookie (amously_region) remembers only whether you are in the EEA, the UK or Switzerland.
• Visit statistics (Vercel Web Analytics): the page address visited, the referrer, approximate location (country, region and city level), device type, operating system, browser and their versions, and the time of the visit are kept as aggregated statistics only. No cookies or browser storage are used; visitors are distinguished only by a hash created from the incoming request, which is discarded after 24 hours. We do not use these statistics to identify individual visitors or to link them with activity on other websites, and we do not use them for advertising. Some paths, such as the administration pages, are not collected, and query strings in page addresses are removed before sending, except campaign tags (values beginning with utm_).
• Cookies and similar technologies: described separately in Section 9.
• Basis for visit statistics: Article 15(1)(6) of the Personal Information Protection Act — our legitimate interest in understanding, as aggregated statistics, the visits needed to operate the website clearly outweighs the rights of data subjects, and the processing stays within a reasonable scope because it uses no cookies, is not used for advertising and involves no tracking across other websites.
• Basis for usage analytics: in the EEA, the UK and Switzerland, your consent; elsewhere, Article 15(1)(6) of the Personal Information Protection Act — our legitimate interest in analysing visits and usage statistically to improve the website clearly outweighs the rights of data subjects, and the processing stays within a reasonable scope because it is not used for advertising and you can decline at any time.

The enquiry form directly collects your name, work email and company name; the information received through a job application is described under "When you apply for a job" above. Values you enter into the ROI simulator (fab scale, number of processes and so on) are sent to the server for calculation but are not stored, and contain no information that identifies an individual.

---

2. Purposes of Collection and Use

• Responding to enquiries: answering questions about our products and services, and arranging product demonstrations and consultations
• Recruitment: identifying applicants, reviewing applications, arranging interviews and other steps, and notifying results
• Protecting the service: blocking automated, repeated submissions of the contact form
• Usage analytics: analysing visits and usage to improve the website — in the EEA, the UK and Switzerland, only where the user has consented to cookies; elsewhere, only where the user has not declined (see Section 9)
• Visit statistics: aggregating visits, referral sources and per-page visits to operate the website (Vercel Web Analytics, no cookies — see Section 9)
• Determining the consent method: deciding which cookie consent method applies based on the country of access

The Company does not use personal information for any purpose beyond those stated above. If a purpose changes, we will obtain consent in advance.

---

3. Retention and Use Period

Only where a statutory retention obligation applies to the transaction or processing, we keep the necessary records separately for the required period:

• Consumer complaint or dispute-resolution records for transactions subject to the Korean e-commerce law: 3 years (Act on Consumer Protection in Electronic Commerce)
• Other cases required by law: for the period that law prescribes

---

4. Provision of Personal Information to Third Parties

The Company does not provide users' personal information to third parties, except:

• where the user has given prior consent; or
• where a law specifically requires it, or an investigative authority requests it following the procedures and methods prescribed by law.

Entrusting the processing of personal information to a service provider is distinct from provision to a third party and is governed by Section 5.

---

5. Entrustment of Processing and Cross-Border Transfer

Entrusting processing to a provider and a transfer that happens because your browser connects directly to an external service are different relationships. All recipients are located outside Korea, so the cross-border transfer details are disclosed here in accordance with PIPA Article 28-8, separated into the two kinds.

Processors we entrust

These process personal information on the Company's behalf and on its instructions.

Transfers that are not entrustment

The recipient below does not process personal information on our behalf. The website references that service's address, so your browser connects to it directly, and the information that a connection necessarily carries reaches the recipient. Because it is not processed on our instructions, it is disclosed separately from entrustment.

You may refuse the cross-border transfer of your personal information. For transfers to Google for usage analytics: in the EEA, the UK and Switzerland, they do not occur if you decline cookies or withdraw your consent; elsewhere, no transfer takes place once you decline using "Cookie settings" in the site footer (see Section 9). If you prefer not to submit a job application through Google Forms, you may email it to the address in Section 10 (contact@amously.ai) instead; no transfer through Google Forms then takes place, and this does not disadvantage your application. However, the transfers for hosting, enquiry handling and web fonts are necessary to display the website and to provide the functions you asked for, and take place regardless of consent. If you refuse them the website may not be usable; please contact us at the address in Section 10.

---

6. Your Rights and How to Exercise Them

You may exercise the following rights at any time:

• request access to your personal information
• request correction of inaccurate information
• request deletion
• request that processing be suspended
• withdraw consent to cookies, or decline analytics cookies

To exercise these rights, contact the Privacy Officer in Section 10; we will act without delay. You can withdraw cookie consent or decline analytics cookies yourself at any time using "Cookie settings" in the site footer.

You may submit a request yourself or through an authorised representative. We may verify your identity and the representative’s authority. If applicable law limits or prevents us from fulfilling a request, we will explain the reason. Withdrawal of consent does not affect lawful processing before withdrawal. You may also exercise any additional rights provided by applicable law.

For privacy assistance or dispute resolution in Korea, contact the Privacy Infringement Report Centre (118) or the Personal Information Dispute Mediation Committee (1833-6972).

---

7. Procedures and Methods for Destroying Personal Information

• Procedure: personal information is destroyed without delay once the retention period has elapsed or the purpose of processing has been achieved. Where a law requires retention, it is destroyed after that period.
• Method: electronic files are deleted by technical means that make recovery impossible; paper documents are shredded or incinerated.

---

8. Security Measures

• Access to personal information is limited to the minimum number of staff, and the administrative pages are restricted to permitted IP addresses.
• HTTPS is applied across the entire website, encrypting data in transit.
• Staff who handle personal information receive security training.

---

9. Cookies and Automatic Collection

The Company distinguishes between cookies that are strictly necessary to operate the website and cookies used for usage analytics. Analytics cookies are handled differently depending on where you access the site from. Your region is the country determined from your IP address; if the country cannot be determined, you are treated as being in the EEA, the UK or Switzerland.

Strictly necessary cookies (used without consent)

These are required for the website to provide the functions you have asked for, and are not subject to consent.

Visit statistics without cookies

Visit statistics (Vercel Web Analytics) use no cookies or browser storage, so they are not subject to the consent banner and are handled the same way in every region. The items collected and the legal basis are set out in Section 1, and the retention period in Section 5.

Analytics cookies (optional)

These are used to analyse how the website is used. They are handled as follows depending on your region.

• EEA (EU member states, Iceland, Liechtenstein and Norway), the UK and Switzerland: The Google Analytics script does not run, no analytics cookie is created and nothing is transferred to Google before you consent. If you consent, the Google Analytics script runs and analytics cookies are used. If you decline or withdraw consent, the script does not run.
• Elsewhere: analytics cookies are used without a separate consent step. You can decline at any time using "Cookie settings" in the site footer; once you decline, the Google Analytics script does not run and stored analytics cookies are deleted.
• In every region, no cookies or signals are used for advertising.
• Analytics cookies are not needed to use the website. If you do not consent or you decline, your use of the website is not limited in any way.

Withdrawing consent

In the EEA, the UK and Switzerland, a banner on your first visit lets you accept or decline. In every region you can change your decision at any time using "Cookie settings" in the site footer; withdrawing consent or declining stops the use of analytics cookies immediately and deletes stored analytics cookies.

If you declined before Version 3 took effect, the banner is shown once more to tell you about the revision. Your earlier choice to decline stays in effect until you choose again, and the Google Analytics script does not run in the meantime. You may also configure your browser to refuse cookies, but some functions such as the language setting may then not work correctly.

---

10. Privacy Officer

The Company has designated the following Privacy Officer, who is responsible for personal information processing and for handling users' enquiries, complaints and requests for redress.

• Name: Seungchoun Choi
• Position: Chief Executive Officer
• Contact: contact@amously.ai

---

11. Changes to This Policy

This policy applies from its effective date. Where content is added, removed or amended in future because of changes in law or Company policy, we will announce the change on the website at least 7 days before it takes effect. Where a change materially affects users' rights, we will announce it at least 30 days in advance.

The effective date and the record of past revisions are set out in Section 12. This revision (Version 3) takes effect on 20 October 2026.

This policy is available in Korean and English. If the translations differ, the Korean text guides interpretation without limiting your rights under applicable law.

---

12. Revision History

Version 3 — in effect from 20 October 2026 (current)

The following changed from Version 2:

• Analytics cookies are now handled by region. In the EEA, the UK and Switzerland analytics cookies are still used only with your consent; elsewhere they are used by default and you can decline at any time using "Cookie settings" (Sections 2 and 9).
• Set out the timing of the transfer to Google by region. The timing of the transfer to Google for usage analytics is now stated separately for the EEA, the UK and Switzerland (after you consent) and elsewhere (unless you decline) (Section 5).
• Added a strictly necessary cookie. The amously_region cookie remembers your region category to decide which consent method applies, and the use of country-of-access information is described (Sections 1 and 9).
• Handling of earlier choices to decline. Users who declined before Version 3 took effect see the banner once more, and their choice to decline stays in effect until they choose again (Section 9).
• Stated the basis for usage analytics and that declining has no consequences. The legal basis for usage analytics is now stated by region, and the policy states that declining analytics cookies does not limit your use of the website (Sections 1 and 9).
• Introduced visit statistics without cookies (Vercel Web Analytics). The items collected, legal basis, retention period and the transfer to Vercel are set out (Sections 1, 2, 3, 5 and 9).

Read the full text of Version 2

Version 2 — in effect from 7 October 2026

The following changed from Version 1:

• Added the entrustment of processing and cross-border transfer disclosures. The entrustment of enquiry notifications, usage analytics and hosting (including processing of contact form submissions), and the cross-border transfer involved in web font delivery, are now set out in Section 5 together with each recipient's contact details.
• Separated entrustment from transfers that are not entrustment. Serving web fonts is not processing on our instructions — your browser connects directly — so it is listed apart in Section 5.
• Added the processing of recruiting applications. The items, purpose, retention period and legal basis for information received through the application form (Google Forms), and its transfer to Google, are set out in Sections 1, 2, 3 and 5.
• Added the section on cookies and automatic collection. Strictly necessary and optional cookies are now distinguished, optional cookies are not used before the user consents, and the retention period of each cookie is stated (Section 9).
• Separated information you enter from information collected automatically, and stated the purpose and handling of IP addresses.
• Stated the enquiry retention period as one year, and limited the statutory retention exception to transactions the law actually covers.
• Expanded the guidance on exercising your rights, including exercise through an authorised representative and rights under applicable law.
• Streamlined the items collected, removing items relating to a prize event (such as mobile phone numbers).
• Added the Privacy Officer and change-notification sections to both language versions (Sections 10 and 11).

Version 1 — 27 December 2024

First issued. That version also carried an announcement date of 1 January 2025.

Read the full text of Version 1